New Privileged Token Context Telemetry Boosts Advanced Hunting in Microsoft Defender

In brief: Defenders can now easily identify logons involving high-privilege identities or special logon flags to better hunt threats and fine-tune detections. When a user…

A short excerpt. Read the linked source for the full article and context.

Monitored guidance in the same product area; this does not establish that the article cites each page.

• Defender unified RBAC permissions
• Defender for Endpoint streamlined connectivity URLs
• Defender for Endpoint streamlined connectivity
• Defender for Endpoint network connectivity and service URLs
• Defender for Endpoint API release notes